Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.4
CVE-2016-0228: IBM Marketing Platform 10.0 can enable phishing redirects
CVE-2016-0228 · published 9 years ago
Summary
The 10.0 version of IBM Marketing Platform contains an open‑redirect flaw in several scripts. An attacker could use this to send users to any web site they choose, making phishing attacks easier. Apply the vendor's security update or patch as soon as possible to stop the misuse.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | marketing_platform |
10.0 cpe:2.3:a:ibm:marketing_platform:10.0:*:*:*:*:*:*:* |
Original advisory text
IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker could exploit this vulnerability to r...
IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker could exploit this vulnerability to redirect a victim to arbitrary Web sites. IBM X-Force ID: 110236.
References
- http://www.ibm.com/support/docview.wss?uid=swg22001952 Patch Vendor Advisory
- http://www.securityfocus.com/bid/97670 Third Party Advisory VDB Entry
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-601Open Redirect
Timeline
Published17 Apr 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-0228 · NVD
Track software like this
Free during beta